AMENDMENTS TO THE CLAIMS: 



1. (Currently Amended) A method of managing risk related to a successful 
completion of a development project, comprising: 

storing a probability of occurrence (Pf) table having a plurality of risk categories, 
each said category having a plurality of table entries, each entry including a category- 
5 specific standardized qualitative probability definition associated with a Pf rating and a 
severity of consequence (CI) table, and identified risks a nd exi s ting risk mitigation plans 
in a shared risk database; and 

via a web browser, a plurality of users, 

formulating an enterprise search of the risk database to identify at least 

10 one risk, 

viewing the Pf table to select a probability of occurrence Pf for said at 
least one risk; and 

viewing the Cf table to select a severity of consequence Cf for said at least 
one risk, said Pf and Cf being combined and ranked to define prioritized risk factors Rf ; 

15 formulating a mitigation s e arch of the ri s k databas e to identify existing 

ris k m i tigati o n plans for th e id e ntifi e d risk to e nhanc e th e dev e lopm e nt of n e w mitigation 
plan s or shor e with other programs th e r e sourc e s to implem e nt the mitigati ea-pfen. 

2. (Currently Amended)The method of claim I, wherein the probability severity of 
occurr e nce consequence table has a-ftktfatity-ef risk cost and schedule impact categories, 
each said category having a plurality of table entries , each entry including a that includ e 
standardized qualitative impact definition and a project-specific amount associated with a 

5 Cf rating probability definitions . 

3. (Currently Amended) The method of claim I 2 y further comprising a user having 
administrative access not provided to said plurality of users first tailoring the probability 
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of occurrence table via the web browser to the select -few a reduced number of categories 
that are relevant to the current development project and storing the tailored probability of 
occurrence table on the shared risk database with access to said plurality of users . 



4. (Currently Amended) The method of claim 2 +, wherein the se v e rity of 
con s equ en c e table has a sch e dule impact category with table entries in the schedule 
impact category specify a project-specific specifying an amount in days, weeks or months 
and having a cost impact category with the table entries in the cost impact category 

5 include specifying multiple sub-categories of project-specific cost impacts in actual 
dollars for the development project. 

5. (Original) The method of claim 4, wherein said multiple sub-categories include 
development cost (NRE), unit cost (DTC) and operations and support (O/S) categories. 

6. (Currently Amended) The method of claim 4, further comprising a user having 
administrative access not provided to said plurality of users first tailoring the severity of 
consequence table to select the cost impact sub-categories and specify their dollar 
amounts and to specify the schedule impact in days, weeks or months for the current 

5 development project and storing the tailored probability of occurrence table on the shared 
risk database with access to said plurality of users . 

7. (Original) The method of claim 1, wherein the enterprise search includes a 
combination of at least two parameters including current or historic, risk factor, vendor, 
component, functional area, category, key work in risk title, key work in risk description, 
IPT, actionee, actionee/team lead/submitter or risk number. 

8. (Original) The method of claim 7, wherein the enterprise search results list at 
least one risk including a combination of risk number, program, risk title and a current 
risk factor. 
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9. (Currently Amended) The method of claim-S 29, wherein the web browser 
provides a transfer link from said at least one risk with its risk mitigation plan to import 
the selected risk and mitigation plan into another program. 

10. (Currently Amended) The method of claim 4 29, wherein in the mitigation search 
includes a combination of at least two parameters including a risk description, risk status, 
start date, original planned complete date, planned complete date and complete date. 

1 1 . (Currently Amended) The method of claim 4 29, further including automatically 
generating risk reports including identified risks, prioritized risk factors and mitigation 
plans. 

12. (Currently Amended) The method of claim 11, wherein a risk review board 
(RRB) report is generated by; 

submitting minutes for a RRB meeting by entering information for each risk 
covered during a RRB meeting and entering the date of the RRB meeting; and 
5 submitting the minutes to generate the RRB report including Number, Title, 

Actionee, Rf, Risk Level and Comments tor each risk. 

13. (Currently Amended) The method of claim 4- 29, wherein the web browser has an 
interface that includes a menu bar with pull-down menu items and menu sub-items for 
viewing the current program, conducting the enterprise search and conducting the 
mitigation search and hyperlinks to the Pf and Cf tables. 

14. (Currently Amended) The method of claim 4 29, wherein the identified risks, risk 
factors and mitigation plans for each user are stored in the shared risk database. 

15. (Currently Amended) A method of managing risk related to a successful 
completion of a development project, comprising: 
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storing a probability of occurrence fPf) table having a plurality of risk categories, 
each said risk category having a plurality of table entries, each entry including a 
5 category-specific standardized qualitative probability definition associated with a Pf 
rating and a severity of consequence fCf) tabic having cost and schedule impact 
categories, each said category having a plurality of table entries, each entry including a 
standardized qualitative impact definition and a project-specific amount associated with a 
Cf rating, and identified risks in a shared risk database; 
10 a user having administrative access to the Pf and Cf tables, tailoring a the 

probability of occurrence (Pf) table having by selecting a reduced number of the risk 
categories to hav e a fewer number of s aid risk cat e gories that are relevant to the current 
development projec t, e ach said ca tego ry having tabl e entries that include standardized 
qualitative probability definitions; and tailoring a the severity of consequence (Cf) table 
15 having a schedul e impact cat e gory with table e ntries by specifying an the schedule 
impact amounts amount in days, weeks or months and specifying the having a cost 
impact amounts category wi th table e ntries .sp e cifying multiple sub - categori e s of cost 
impacts in actual dollars for the current development project; 

storing the tailored Pf and Cf tables in the shared risk database with access to a 
20 plurality of users: 

identifying a plurality of risks relating to the successful completion of the 
development project; 

assigning a risk factor (Rf) to each risk by selecting the table entry Pf for the risk 
category in the Pf table that most closely describes the risk, selecting the table entries Cf 
25 for the cost impact and schedule impact categories in the Cf table, and computing the risk 
factor as a function of Pf and C f, and k e eping the highest risk factor Rf ; and 

prioritizing the risks based on the assigned risk factors Rf. 

16. (Currently Amended) The method of claim 15, wherein said cost impact category 
includes multipl e s ub categori es i nektde N RE, DTC and O/S sub- categories that are each 
specified during tailoring of the Cf table . 
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1 7. (Original) The method of claim 15, wherein the risk factor Rf is the product of Pf 
and Cf. 

18. cancelled 

1 9. (Currently Amended) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a plurality of risk categories, each said risk category having a plurality 
5 of table entries, each entry including a category-specific standardized qualitative 
probability definition associated with a Pf rating and a severity of consequence (Cf) table, 
risk identification information and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces for searching, viewing and entering information to and from the shared risk 
1 0 data base via a web browser; 
an intranet; and 

a plurality of computer workstations in communication with the server via the 
intranet, each said workstation provided with a web browser to search the database using 
the standardized interfaces to identify risks, to select entries from the Pf and Cf tables and 
15 to calculate and prioritize a risk factor Rf for each risk , and to s e arch th e databa se-4o 
id e ntify existing risk mitiga t ion plans for the prioritized risks , 

20. (Currently Amended) The system of claim -t9 33, wherein the tool's standardized 
interface includes a menu bar with pull-down menu items and menu sub-items to view 
the current programs, to view program risks, to conduct an enterprise search to identify 
risks and to conduct a formulate the risk mitigation search to identify mitigation plans 

5 and hyperlinks to the Pf and Cf tables. 

21 . (Currently Amended) The system of claim 1 9, wherein the PF tabl e has a plura l ity 
of ri s k cat eg ories, e ach said c at e gory having table e ntri e s that include standardized 
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qua l i tati ve- probabi I i t y de fm i t ions - and -the Cf table has a schedule impact category with 
table entries , each entry for specifying including a standardized qualitative impact 
5 definition and a project-specific schedule impact amount in days, weeks or months and 
having a cost impact category with table entries , each entry including a standardized 
qualitative impact definition for s p e cifying and project-specific cost impact amounts for 
multiple sub-categories of cost impacts in actual dollars for the development project, said 
web browser providing administrative access to at least one user to tailor the Pf table to 
1 0 have fewer categories that are relevant to the current project and the Cf table to specify 
the amounts in days, weeks or months of the table entries in the schedule impact category 
and the amounts in actual dollars for the multiple sub-categories in the cost impact 
category . 

22. (Currently Amended) The system of claim W 33, wherein the workstation via the 
web browser submits an enterprise search that includes a combination of at least two 
parameters including current or historic, risk factor, vendor, component, functional area, 
category, key word in risk title, key word in risk description, IPT, actionee, actionee/team 

5 iead/submitter or risk number and the server returns via the web browser an enterprise 
search results list including for at least one risk a combination of risk number, program, 
risk title, a current risk factor and its risk mitigation plan. 

23. (Currently Amcnded)The system of claim -H) 33, wherein the workstation via the 
web browser submits a mitigation search that includes a combination of at least two 
parameters including a risk description, risk status, start date, original planned complete 
date, planned complete date and complete date and the server returns existing mitigation 

5 plans that satisfy the search parameters. 

24. (Currently Amended)The system of claim -W 33, wherein the workstations 
automatically submit identified risks, risk factors and mitigation plans to the shared 
database, said server automatically generating risk reports including identified risks, 
prioritized risk factors and mitigation plans for the current project. 
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25. (Currently Amended) A web-based risk management system for managing risk 
related to a successful completion of a development project, comprising: 

a server comprising a shared risk database that stores a probability of occurrence 
(Pf) table having a number of risk categories , each said risk category having a plurality of 
5 table entries, each entry including a category-specific standardized qualitative probability 
definition associated with a Pf rating and a severity of consequence (Cf) table having a 
schedule impact category with table entries including a standardized qualitative impact 
definition and a project-specific schedule impact specified sp e cifying un amount in days, 
weeks or months and having a cost impact category with table entries including a 
1 0 standardized qualitative impact definition and project-specific cost impacts speetfymg for 
multiple sub-categories of cost impacts specified in actual dollars for the current 
development project, risk identification information and risk mitigation information; 

a web-based risk management tool on the server that provides standardized 
interfaces having a menu bar with menu items and menu sub-items for searching, viewing 
15 and entering information to and from the shared risk data and hyperlinks to the Pf and Cf 
tables base via a web browser; 
an intranet; 

a computer workstation in communication with the server via the intranet, said 
workstation provided with a web browser for tailoring the Pf table to have a fewer 
20 number of said risk categories and the Cf table to specify the dollar amounts for the cost 
impact sub-categories and the days, weeks or months for the schedule impact; 

a plurality of computer workstations in communication with the server via the 
intranet, each said workstation provided with a web browser to search the database to 
identify risks, to select entries from the tailored Pf and Cf tables and to calculate and 
25 prioritize a risk factor Rf for each risM o sea rc h the databas e to id e ntify risk mitigation 
i nf o rmation fo r th e prioritiz e d risk s and t o tr a ck and r e port on the status of identifi e d 

i inivn. 
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26. (Original) The system of claim 25, wherein said multiple sub-categories include 
NRE, DTC and O/S categories. 

27. (Original) The system of claim 25, wherein the workstation via the web browser 
submits an enterprise search that includes a combination of at least two parameters 
including current or historic, risk factor, vendor, component, functional area, category, 
key word in risk title, key word in risk description, TPT, actionee, actionee/team 
lead/submitter or risk number and the server returns via the web browser an enterprise 
search results list including for at least one risk a combination of risk number, program, 
risk title, a current risk factor and its risk mitigation plan. 

28. (Currently Amended) The system of claim 25, wherein the workstation via the 
web browser submits a mitigation search that includes a combination of at least two 
parameters including a risk description, risk status, start date, original planned complete 
date, planned complete date and complete date and the server returns existing successful 
and unsuccessful mitigation plans that satisfy the search parameters. 

29. (New) The method of claim 1, wherein existing risk mitigation plans for different 
risks are stored in the shared database, further comprising: 

formulating a mitigation search of the risk database to identify existing risk 
mitigation plans for the identified risk; 

formulating a new risk mitigation plan that's builds upon the one or more existing 
risk mitigation plans; 

storing the new risk mitigation plan on the shared database; and 

implementing the new risk mitigation plan. 

30. (New) The method of claim 29, wherein the mitigation search identifies both 
successful and unsuccessful existing risk mitigation plans. 

3 1 . (New) The method of claim 29, further comprising: 
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aggregating the risk mitigation plans from a plurality of different users and 
different programs to update and store a risk mitigation plan on the shared database. 

32. (New) The method of claim 29, further comprising: 

sharing resources with other programs to implement the mitigation plan. 

33. (New) The method of claim 29, where the risk mitigation plan includes a number 
of activities, each activity including a description and an assigned Pf and Cf rating. 

34. (New) The system of claim 1 9, wherein existing risk mitigation plans for different 
risks are stored in the shared database, said web browser configured to formulate a 
mitigation search of the risk database to identify existing risk mitigation plans for the 
identified risk, formulate a new risk mitigation plan that's builds upon the one or more 
existing risk mitigation plans, and store the new risk mitigation plan on the shared 
database. 

35. (New) The system of claim 34, wherein the mitigation search identifies both 
successful and unsuccessful existing risk mitigation plans. 

36. (New) The system of claim 34, wherein the web browser facilitates sharing 
resources with other programs to implement the mitigation plan. 
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